CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-116223icret EasyImage del.php privileges managementicret EasyImage
- CVE-2026-103299nexi Alpha Bank for WooCommerce <= 2.2.0 - Unauthenticated Payment Confirmation Forgery via Empty Shared SecretPayment Gateway
- CVE-2026-103319OPay Payment Gateway for WooCommerce <= 2.5.5 - Unauthenticated Payment Confirmation Forgery via Empty Default Secret KeyOPay Payment Gateway for WooCommerce
- CVE-2026-103381Mintpay <= 2.2.3 - Unauthenticated Order Payment Completion and Cancellation via Callback ForgeryMintpay for WooCommerce
- CVE-2026-103306iKhokha Payment Gateway < 3.0.4 - Unauthenticated Order Payment Forgery via CallbackOnline Payments with iK Pay Gateway
- CVE-2026-103298CCAvenue Payment Gateway for WooCommerce <= 3.1 - Unauthenticated Order Payment Completion via Webhook ForgeryCCAvenue Payment Gateway for WooCommerce
- CVE-2026-116124GNOME libgsf OLE2 gsf-infile-msole.c ole_info_read_metabat heap-based overflowGNOME libgsf
- CVE-2026-116123NocoDB signup validatePassword excessive authenticationNocoDB
- CVE-2026-116122NocoDB Sign-in Endpoint AuthService.validateUser information disclosureNocoDB
- CVE-2026-116121NocoDB Registration users.service.ts race conditionNocoDB
- CVE-2026-116120NocoDB PublicApiLimiterGuard signup UserRefreshToken.deleteAllUserToken allocation of resourcesNocoDB
- CVE-2026-116119NocoDB Password-Reset Flow users.service.ts race conditionNocoDB
- CVE-2026-113345Electronic delivery item Inspection Support System provided by Japan's Ministry of Land, Infrastructure, Transport and Tourism contains an iMinistry of Land, Infrastructure, Transport and Tourism, Ja…
- CVE-2026-116118Z.ai Zcode Sed Command Filter os command injectionZ.ai Zcode
- CVE-2026-116117halo-dev halo View Name Resolver DefaultViewNameResolver.java path traversalhalo-dev halo
- CVE-2026-116116Yoosee GM8135S Camera Secure Boot signature verificationYoosee GM8135S Camera
- CVE-2026-116115Yoosee GM8135S Camera WiFi Configuration wpa_supplicantX.conf initializationYoosee GM8135S Camera
- CVE-2026-116114Yoosee GM8135S Camera Live UDP H.264 Video Stream npc cleartext transmissionYoosee GM8135S Camera
- CVE-2026-116113GouGuOA Api.php chunkUpload unrestricted uploadGouGuOA
- CVE-2026-116112HashenUdara edoc-doctor-appointment-system add-new.php sql injectionHashenUdara edoc-doctor-appointment-system
- CVE-2026-1161112K Games Civilization V Lua Sandbox loadstring type confusion2K Games Civilization V
- CVE-2026-116110GiantappMan LiveWallPaper SignalR Hub UploadFile missing authenticationGiantappMan LiveWallPaper
- CVE-2026-116109continuedev Continue MCP Server Transport ConfigHandler.ts MCPManagerSingleton.setConnections os command injectioncontinuedev Continue
- CVE-2026-116108openbq-org OpenBB Local API Server api_settings.py access controlopenbq-org OpenBB
- CVE-2026-116107Datafeedr Product Sets Plugin AJAX Handlers ajax.php dfrps_ajax_delete_saved_search authorizationDatafeedr Product Sets Plugin
- CVE-2026-116106HeyCyan App FileProvider access controlHeyCyan App
- CVE-2026-116105HeyCyan App Network Security Configuration AndroidManifest.xml cleartext transmissionHeyCyan App
- CVE-2026-116104Sony Neural Network Libraries NNP Converter utils.py func_set_nnabla_version_decorate code injectionSony Neural Network Libraries
- CVE-2026-116103Sony Neural Network Libraries Encode Param encode_decode_param.py load_param_in_txt code injectionSony Neural Network Libraries
- CVE-2026-116102QuantGeekDev docker-mcp docker_executor.py _build_windows_command os command injectionQuantGeekDev docker-mcp